Sub-processors
Rekomi uses third-party sub-processors to provide the platform. The full, dated list, with the purpose and personal data shared for each, is maintained at /legal/subprocessors. We give customers advance notice before adding or replacing a sub-processor that processes personal data.
The current sub-processors include Clerk (authentication), Stripe (billing and payouts), Resend (email), Cloudflare (DNS, CDN, edge), Vercel (front-end hosting), IPQualityScore (fraud detection), DigitalOcean (hosting and private file storage), managed PostgreSQL and Redis, Sentry (error monitoring), PostHog and Google Analytics (opt-in analytics), Intercom (opt-in support chat), Anthropic (AI features, only when invoked), Zapier (embedded automation page), Gravatar (customer avatars), Google Fonts (fonts on portal and creator pages), Calendly (demo booking), Paddle (conversion tracking), Braintree (conversion tracking), Shopify (conversion tracking and app billing), Wix (conversion tracking and app billing), Lemon Squeezy (conversion tracking), Chargebee (conversion tracking), Polar (conversion tracking), Recurly (conversion tracking), Gumroad (conversion tracking), Creem (conversion tracking), Dodo Payments (conversion tracking), and PayPal (payout rail). See the sub-processor list for details.
Data residency
Default region: United States. Our CDN operates globally; stored data lives in the US.
GDPR posture
Rekomi is GDPR aware. We process customer data as a data processor under our DPA. Data subject requests (access, deletion, portability) can be submitted via support@rekomi.com and are resolved within 30 days.
CCPA posture
California consumers can request access, deletion, and opt-out of data sale (which we do not do). Email support@rekomi.com to submit a request.
Data Processing Addendum (DPA)
The DPA is published at /legal/dpa and applies to every account. For enterprise variants or custom terms, email support@rekomi.com.
Security disclosures
For vulnerability reporting, see our security disclosure page.